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INFORMATION DISCLOSURE STATEMENT 

1-6. U.S. Pat. Nos. 5,159,632, entitled "METHOD AND APPARATUS FOR PUBLIC 
KEY EXCHANGE IN A CRYPTOGRAPHIC SYSTEM"; 5,271,061, entitled "METHOD AND 
APPARATUS FOR PUBLIC KEY EXCHANGE IN A CRYPTOGRAPHIC SYSTEM"; 
5,463,690, entitled "METHOD AND APPARATUS FOR PUBLIC KEY EXCHANGE IN A 
CRYPTOGRAPHIC SYSTEM"; 5,581,616, entitled "METHOD AND APPARATUS FOR 
DIGITAL SIGNATURE AUTHENTICATION"; 5,805,703, entitled "METHOD AND 
APPARATUS FOR DIGITAL SIGNATURE AUTHENTICATION"; and 6,049,610, entitled 
"METHOD AND APPARATUS FOR DIGITAL SIGNATURE AUTHENTICATION"; each 
disclose the use of a class of numbers in the form of 2^q-C which make modular reduction more 
efficient and. therefore, make cryptographic methods such as key exchange and digital signatures 
more efficient. The present invention does not use a class of numbers in the form of 2^q-C. 

7. The use of cryptographic key pairs was disclosed in U.S. Pat. No. 4,200,770, entitled 
"CRYPTOGRAPHIC APPARATUS AND METHOD." U.S. Pat. No. 4,200,770 also disclosed 
the application of key pairs to the problem of key agreement over an insecure communication 
channel. U.S. Pat. No. 4,200,770 does not disclose a method of cryptography based on elliptic 
curves as does the present invention. 



8. Federal Information Processing Standards Publication 186-2 (i.e., FIPS PUB 186-2) 
discloses a digital signature standard. In the appendix of FIPS PUB 186-2 are recommended 
elliptic curves for a 192-bit, a 224-bit, a 256-bit, a 384-bit, and a 521 -bit digital signature. The 
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elliptic curves disclosed in FIPS PUB 186-2 are different from the elliptic curves used in the 
present invention. 

9-10. A book by N. Koblitz, "A Course in Number Theory and Cryptography/' (1987), 
and a paper by V. Miller, "Use of elliptic curves in cryptography," Advances in Cryptoiogy - 
CRYPTO 85, LNCS 218, pp. 417-426, 1986, disclose the method of adapting discrete-logarithm 
based algorithms to the setting of elliptic curves. The elliptic curves disclosed in Koblitz and 
Miller are different from the elliptic curves used in the present invention. 

1 1 . A w^ay to avoid explicit modular reduction is by carrying out arithmetic operations in 
the field Fp. This was first proposed by P. Montgomery in the paper "Modular multiplication 
v^ithout trial division," Mathematics of Computation, 44 (1985), pp. 519-521. This method has 
the advantage that it can be applied to both elliptic and non-elliptic cryptoalgorithms. However, 
Montgomery does not disclose the use of the elliptic curves of the present invention. 
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